$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/976764a1-92d4-30a0-8e82-b8b040c5e4ab.roa File: 976764a1-92d4-30a0-8e82-b8b040c5e4ab.roa (raw, json) Hash identifier: o/noXOeDqhCWIfe6QFpPntge21NDXXZN/gpuyENCRa0= Subject key identifier: 2C:D9:D3:FE:6A:94:28:44:CB:68:73:34:80:DA:B2:8D:8C:06:DA:FC Certificate issuer: /CN=ffc39f64-f356-459c-8bf7-d142a7a166f3 Certificate serial: 010D0C9F4328584CC3474A80547CFD2E5805CE00 Authority key identifier: 4D:52:88:03:05:6C:F7:2A:7F:D0:E7:BC:30:7E:24:98:8D:2D:20:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/976764a1-92d4-30a0-8e82-b8b040c5e4ab.roa Signing time: Thu 05 Feb 2026 14:00:40 +0000 ROA not before: Thu 05 Feb 2026 14:00:40 +0000 ROA not after: Wed 06 May 2026 13:00:40 +0000 asID: 18701 IP address blocks: 138.32.20.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/ffc39f64-f356-459c-8bf7-d142a7a166f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/ffc39f64-f356-459c-8bf7-d142a7a166f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:c3:47:4a:80:54:7c:fd:2e:58:05:ce:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffc39f64-f356-459c-8bf7-d142a7a166f3 Validity Not Before: Feb 5 14:00:40 2026 GMT Not After : May 6 13:00:40 2026 GMT Subject: CN=7466113f-e768-4eca-b925-6a14754dcaf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:8c:6c:34:0c:a2:74:ce:76:b2:6d:ca:36:d4: cf:42:ac:5e:fe:e7:0e:24:7c:18:0a:5e:0d:c8:1c: 22:71:81:04:57:89:c2:50:6c:8d:9c:e2:da:0f:37: 1d:b4:4c:ed:2b:75:76:b8:6a:3f:81:55:55:73:cc: 4e:2b:83:31:f1:6a:96:58:e9:67:78:cf:09:32:72: 50:56:47:30:00:af:7c:6a:9c:26:4c:45:d7:85:ab: 7e:9a:c7:50:a8:a8:c8:ea:92:63:17:59:d6:e7:f9: 32:d7:85:b7:18:c3:b7:46:95:65:1d:d3:81:8c:c0: 05:a5:a1:5c:3c:48:ac:05:ec:e7:1e:39:99:a1:27: ff:4d:ba:f5:24:fc:ed:31:c5:6b:24:44:9a:02:7b: 29:8d:43:ac:bb:50:73:0d:4a:ff:19:4e:51:ab:d5: f5:82:2d:be:35:17:68:e4:f0:3c:0e:d7:e7:2a:f0: 6c:3e:42:6a:73:62:82:b5:75:df:35:96:13:58:b7: aa:87:a5:92:c5:08:6c:56:35:70:81:cb:80:d4:4f: df:50:2a:3c:c4:d9:87:3b:f8:62:1d:ed:79:61:07: ca:9b:17:51:bb:92:4d:c2:85:db:94:1b:75:78:13: ee:3b:fe:99:01:de:32:e2:27:2a:e5:b9:86:7c:6b: 2c:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:D9:D3:FE:6A:94:28:44:CB:68:73:34:80:DA:B2:8D:8C:06:DA:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/976764a1-92d4-30a0-8e82-b8b040c5e4ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/ffc39f64-f356-459c-8bf7-d142a7a166f3.crl X509v3 Authority Key Identifier: keyid:4D:52:88:03:05:6C:F7:2A:7F:D0:E7:BC:30:7E:24:98:8D:2D:20:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3.cer sbgp-ipAddrBlock: critical IPv4: 138.32.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:c9:88:ca:ca:a1:41:a9:91:c1:14:82:8b:ca:2f:77:f5:d9: 3f:3a:d1:22:3e:5b:c3:ea:e4:71:0c:64:21:96:89:d4:d6:3e: b6:07:10:35:ec:48:3d:14:8a:f9:8e:67:b9:d3:7b:9e:d0:78: d5:89:37:03:bf:e5:ca:fa:b6:32:eb:61:a5:59:1a:d8:d6:17: 93:10:86:03:25:c5:31:00:04:bf:9f:f9:ea:33:b8:a4:73:bc: c3:cd:75:90:35:d8:c4:a2:59:a4:c0:f0:12:ed:fe:2e:48:60: b3:fd:f7:39:01:07:fc:4b:de:19:5a:c9:10:a4:a2:ec:b2:72: 8b:0d:f4:84:84:a1:fb:2c:a1:1b:04:68:de:08:81:b4:86:80: f5:f3:27:ba:c3:04:ec:54:de:3a:8c:c8:d3:88:42:d8:94:d3: aa:62:4e:0f:79:f9:d7:3b:09:fe:da:57:35:47:16:0d:01:3d: b4:1b:5c:2f:eb:05:36:5b:f0:38:36:ab:6c:8c:26:19:60:99: 62:1f:ea:7d:56:79:61:c0:90:49:e3:78:2d:b6:7a:70:15:8c: d1:79:6e:05:11:4c:0f:5d:fc:89:eb:a8:32:e6:bc:27:5f:88: 7e:89:d6:5e:34:f8:99:b5:e8:60:aa:c3:74:fc:f6:93:01:07: cf:de:26:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzDR0qAVHz9LlgFzgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmZjMzlmNjQtZjM1Ni00NTljLThiZjctZDE0MmE3YTE2 NmYzMB4XDTI2MDIwNTE0MDA0MFoXDTI2MDUwNjEzMDA0MFowLzEtMCsGA1UEAxMk NzQ2NjExM2YtZTc2OC00ZWNhLWI5MjUtNmExNDc1NGRjYWY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvYxsNAyidM52sm3KNtTPQqxe/ucOJHwYCl4N yBwicYEEV4nCUGyNnOLaDzcdtEztK3V2uGo/gVVVc8xOK4Mx8WqWWOlneM8JMnJQ VkcwAK98apwmTEXXhat+msdQqKjI6pJjF1nW5/ky14W3GMO3RpVlHdOBjMAFpaFc PEisBeznHjmZoSf/Tbr1JPztMcVrJESaAnspjUOsu1BzDUr/GU5Rq9X1gi2+NRdo 5PA8DtfnKvBsPkJqc2KCtXXfNZYTWLeqh6WSxQhsVjVwgcuA1E/fUCo8xNmHO/hi He15YQfKmxdRu5JNwoXblBt1eBPuO/6ZAd4y4icq5bmGfGsszwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCzZ0/5qlChEy2hzNIDaso2MBtr8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mZmMz OWY2NC1mMzU2LTQ1OWMtOGJmNy1kMTQyYTdhMTY2ZjMvOTc2NzY0YTEtOTJkNC0z MGEwLThlODItYjhiMDQwYzVlNGFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZmZjMzlmNjQtZjM1Ni00NTljLThi ZjctZDE0MmE3YTE2NmYzL2ZmYzM5ZjY0LWYzNTYtNDU5Yy04YmY3LWQxNDJhN2Ex NjZmMy5jcmwwHwYDVR0jBBgwFoAUTVKIAwVs9yp/0Oe8MH4kmI0tICAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mZmMzOWY2NC1mMzU2LTQ1OWMtOGJmNy1kMTQy YTdhMTY2ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCiiAUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGbJiMrKoUGpkcEUgovKL3f12T860SI+W8Pq5HEMZCGWidTWPrYHEDXs SD0UivmOZ7nTe57QeNWJNwO/5cr6tjLrYaVZGtjWF5MQhgMlxTEABL+f+eozuKRz vMPNdZA12MSiWaTA8BLt/i5IYLP99zkBB/xL3hlayRCkouyycosN9ISEofssoRsE aN4IgbSGgPXzJ7rDBOxU3jqMyNOIQtiU06piTg95+dc7Cf7aVzVHFg0BPbQbXC/r BTZb8Dg2q2yMJhlgmWIf6n1WeWHAkEnjeC22enAVjNF5bgURTA9d/InrqDLmvCdf iH6J1l40+Jm16GCqw3T89pMBB8/eJh8= -----END CERTIFICATE-----Generated at Mon Mar 2 21:25:53 2026 by rpki-client